This vulnerability (CWE-862) in LoginPress Pro involves missing authorization controls, meaning that the software does not properly verify whether a user is authorized to perform certain actions. It affects versions prior to 3.0.0. The CVSS 3.1 base score is 6.5, with the vector indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but with availability impact. No patch or remediation level has been disclosed by the vendor or authoritative sources yet.

The vulnerability allows an unauthenticated attacker to cause an availability impact on the affected system by bypassing authorization checks. There is no reported impact on confidentiality or integrity. Exploitation could lead to denial of service or disruption of service availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds have been provided by the vendor at this time.